OSVDB: The Open Source Vulnerability Database

Creditee: Sam Thomas

Known Contact Information:

(as of 2006-08-08)
(as of 2007-06-12)

Known Affiliations:

Zero Day Initiative (ZDI) (as of 2006-08-08)

Disclosed Vulnerabilities (12):

Disc. Date	OSVDB ID	CVEID	Title
2010-01-21	61911	2010-0245	Microsoft IE Table Layout Reuse Memory Corruption
2010-01-21	61912	2010-0246	Microsoft IE Baseline Tag Rendering Memory Corruption
2009-12-08	60837	2009-3671	Microsoft IE XHTML DOM Manipulation Memory Corruption
2009-10-13	58874	2009-2531	Microsoft IE CSS Parsing writing-mode Style Memory Corruption
2009-02-10	51840	2009-0076	Microsoft IE XHTML Strict Mode CSS Handling Memory Corruption Arbitrary Code Execution
2008-08-12	47416	2008-2257	Microsoft IE HTML Document Objects Handling Memory Corruption
2007-12-11	39119	2007-3903	Microsoft IE Object cloneNode / nodeValue Function Uninitialized Memory Corruption
2007-06-12	35351	2007-1751	Microsoft IE Unspecified Memory Corruption Arbitrary Code Execution
2006-12-12	30814	2006-5581	Microsoft IE DHTML Script Function Memory Corruption
2006-11-14	31323	2006-4687	Microsoft IE DIV Tag and HTML CSS Float Properties Arbitrary Code Execution
2006-08-08	27854	2006-3451	Microsoft IE Chained CSS Imports Memory Corruption
2006-08-08	27855	2006-3450	Microsoft IE document.getElementByID Crafted CSS Arbitrary Code Execution

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.